Click here to download all references as Bib-File.
| 2020-05-06 ⋅ Yoroi ⋅ New Cyber Operation Targets Italy: Digging Into the Netwire Attack Chain NetWire RC |
| 2020-04-28 ⋅ Yoroi ⋅ Outlaw is Back, a New Crypto-Botnet Targets European Organizations Cpuminer PerlBot |
| 2020-03-19 ⋅ Yoroi ⋅ Is APT 27 Abusing COVID-19 To Attack People ?! |
| 2020-03-02 ⋅ Yoroi ⋅ Karkoff 2020: a new APT34 espionage operation involves Lebanon Government Karkoff |
| 2020-02-21 ⋅ Yoroi ⋅ Transparent Tribe: Four Years Later Crimson RAT |
| 2020-02-19 ⋅ Yoroi ⋅ Uncovering New Magecart Implant Attacking eCommerce magecart |
| 2020-02-17 ⋅ Yoroi ⋅ Cyberwarfare: A deep dive into the latest Gamaredon Espionage Campaign Pteranodon |
| 2020-01-27 ⋅ Yoroi ⋅ Aggah: How to run a botnet without renting a Server (for more than a year) LokiBot Azorult |
| 2020-01-14 ⋅ Yoroi ⋅ Analysis Run BitPyLock |
| 2019-12-27 ⋅ Yoroi ⋅ Analysis Run Yarraq |
| 2019-12-20 ⋅ Yoroi ⋅ Unveiling JsOutProx: A New Enterprise Grade Implant JSOutProx |
| 2019-12-09 ⋅ Yoroi ⋅ Analysis Run SNC |
| 2019-09-24 ⋅ Yoroi ⋅ APT or not APT? What's Behind the Aggah Campaign Azorult |
| 2019-07-18 ⋅ Github (ZLab-Cybaze-Yoroi) ⋅ ZLab - LooCipher Decryption Tool looChiper |
| 2019-07-02 ⋅ Yoroi ⋅ LooCipher: The New Infernal Ransomware looChiper |
| 2019-06-08 ⋅ Yoroi ⋅ The Evolution of Aggah: From Roma225 to the RG Campaign Revenge RAT |
| 2019-05-29 ⋅ Yoroi ⋅ TA505 is Expanding its Operations RMS |
| 2019-05-16 ⋅ Yoroi ⋅ The Stealthy Email Stealer in the TA505 Arsenal TA505 |
| 2019-04-18 ⋅ Yoroi ⋅ APT28 and Upcoming Elections: Evidence of Possible Interference (Part II) Seduploader |
| 2019-04-09 ⋅ Yoroi ⋅ LimeRAT spreads in the wild LimeRAT |